As a Windows sysadmin exposing RDP (the Windows equivalent to VNC/ARD) directly to the internet without a proxy, VPN or strict firewall policy that restricts it to a few known public IP addresses has been sysadmin 101 for decades. There have been multiple vulnerabilities that allowed attackers to take over Windows machines over RDP.
So I totally agree with you. This is exactly why you need to protect users from themselves. There will always be bugs in software and you should minimize the risk from them by taking some security measures.
So I totally agree with you. This is exactly why you need to protect users from themselves. There will always be bugs in software and you should minimize the risk from them by taking some security measures.